Risk-based strategic assessment and planning technique for information security, focusing on organizational risk and self-directed evaluation.
Open the full OCTAVE — Operationally Critical Threat, Asset, and Vulnerability Evaluation page